Configure and Manage Group Policy Flashcards
A application was deployed via GPO. You need to update to the current version. The instructions state you must remove the old version before installing the new software. How should you accomplish this?
- Configure a GPO to assign the new version to member computers. - Configure a GPO to upgrade the application and replace the existing version
You are configuring a GPO to deploy Adobe Reader to all users at first logon. You need to ensure that installs Abode Reader without any user interaction
- Installation user interface options - Basic
What is basic folder redirection?
A GPO linked to the domain or an OU will redirect all users’ documents in that OU to the file server. You can not restrict redirection
What is Advance Folder redirection?
What options can you configure?
It allows you to specifiy Security Group Membership for folder redirection.
Configurable Options
Action for Target Folder Locaiton
- Create a folder for each user under the root path
- Redirect to the following location
- Redirect to the local userprofile location
Where
- The Root Path
Can you modify permissions on a OU level to allow an Admin to Create and Link GPOs?
No
You have a new Admin who needs to create GPOs for a Specific OU. The Admin should not be able to modify GPOs created by pthers. You need to make sure that does not get assigned more permissions than needed.
What should you do?
Add the Admin to the Group Policy Creator Owners Security Group
What is Group Policy Modeling?
A tool within GPMC that lets you create a model of what will happen when you move user or computers from one OU to another.
You need to ensure that laptops running Windows XP go into hibernation when the computer lid is closed. This policy should only apply to laptops.
What should you do?
You need to configure Power Options item. The options you configure will apply to Windows XP only. Then use Item-level targeting in the comon options to limit applicaiton to portable computers only.
What is the Group Policy Heirarchy?
L - Local
S - Site
D - Domain
OU - Organizational Unit
“Last to Apply Wins”
What does the PowerShell Cmdlet do?
Backup-GPO
Backs up one GPO or all the GPOs in a domain.
What does the PowerShell CmdLet Do?
Copy-GPO
Copies a GPO.
What does the PowerShell CmdLet Do?
Get-GPInheritance
Gets Group Policy inheritance information for a specified domain or OU.
What does the PowerShell CmdLet Do?
Get-GPO
Gets one GPO or all the GPOs in a domain.
What does the PowerShell CmdLet Do?
Get-GPOReport
Generates a report either in XML or HTML format for a specified GPO or for all GPOs in a domain.
What does the PowerShell CmdLet Do?
Get-GPPermission
Gets the permission level for one or more security principals on a specified GPO.
What does the PowerShell CmdLet Do?
Get-GPPrefRegistryValue
Gets one or more Registry preference items under either Computer Configuration or User Configuration in a GPO.
What does the PowerShell CmdLet Do?
Get-GPRegistryValue
Gets one or more registry-based policy settings under either Computer Configuration or User Configuration in a GPO.
What does the PowerShell CmdLet Do?
Get-GPResultantSetOfPolicy
Gets and writes the RSoP information for a user, a computer, or both to a file.
What does the PowerShell CmdLet Do?
Get-GPStarterGPO
Gets one Starter GPO or all Starter GPOs in a domain.
What does the PowerShell CmdLet Do?
Import-GPO
Imports the Group Policy settings from a backed-up GPO into a specified GPO.
What does the PowerShell CmdLet Do?
Invoke-GPUpdate
Schedules a remote Group Policy refresh on the specified computer.
What does the PowerShell CmdLet Do?
New-GPLink
Links a GPO to a site, domain, or OU.
What does the PowerShell CmdLet Do?
New-GPO
Creates a GPO.
What does the PowerShell CmdLet Do?
New-GPStarterGPO
Creates a Starter GPO.
What does the PowerShell CmdLet Do?
Remove-GPLink
Removes a GPO link from a site, domain or OU.
What does the PowerShell CmdLet Do?
Remove-GPO
Removes a GPO.
What does the PowerShell CmdLet Do?
Remove-GPPrefRegistryValue
Removes one or more Registry preference items from either Computer Configuration or User Configuration in a GPO.
What does the PowerShell CmdLet Do?
Remove-GPRegistryValue
Removes one or more registry-based policy settings from either Computer Configuration or User Configuration in a GPO.
What does the PowerShell CmdLet Do?
Rename-GPO
Assigns a new display name to a GPO.
What does the PowerShell CmdLet Do?
Restore-GPO
Restores one GPO or all GPOs in a domain from one or more GPO backup files.
What does the PowerShell CmdLet Do?
Set-GPInheritance
Blocks or unblocks inheritance for a specified domain or organizational unit.
What does the PowerShell CmdLet Do?
Set-GPLink
You edit the following properties:
- Enabled. If the GPO link is enabled, the settings of the GPO are applied when Group Policy is processed for the site, domain or OU.
- Enforced. If the GPO link is enforced, it cannot be blocked at a lower-level (in the Group Policy processing hierarchy) container.
- Order. The order specifies the precedence that the settings of the GPO take over conflicting settings in other GPOs that are linked, and enabled, to the same site, domain, or OU.
What does the PowerShell CmdLet Do?
Set-GPPermission
Grants a level of permissions to a security principal for one GPO or all the GPOs in a domain.
What does the PowerShell CmdLet Do?
Set-GPPrefRegistryValue
Configures a Registry preference item under either Computer Configuration or User Configuration in a GPO.
What does the PowerShell CmdLet Do?
Set-GPRegistryValue
Configures one or more registry-based policy settings under either Computer Configuration or User Configuration in a GPO.
The configurable behaviors
What are client-side extensions computer policies?
- Allow Processing Across a slow Network connection
- Do Not Apply during perodic background processing
- Process even if the group policy objects have not changed
What is the Managed Filter used for?
Does the client computer/user apply these settings?
IF set to ANY - all policies
IF set to YES - it filters for any settings that will be removed if the computer or user falls out of the scope of management
IF set to NO - it filters for any settings that will not be affected if the computer or user falls out of the scope of management
What is the configured policy filter?
It filters policies that are:
- Any - All Policies
- Yes - Any Policies that are Enabled/Disabled
- No - only policies that are NOT Configured
What permissions can you apply (for an ADMIN) at an OU level for GPOs?
- Link GPOs
- Perform Group Policy Modeling Analyses
- Read Group Policy Results Data
Does Windows XP have client side extensions instaled by default?
No